[Git][security-tracker-team/security-tracker][master] Expand commit list for CVE-2021-44648/gdk-pixbuf
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Aug 28 12:50:40 BST 2022
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
143b0f65 by Salvatore Bonaccorso at 2022-08-28T13:49:54+02:00
Expand commit list for CVE-2021-44648/gdk-pixbuf
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -53394,8 +53394,10 @@ CVE-2021-44648 (GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow
NOTE: https://sahildhar.github.io/blogpost/GdkPixbuf-Heap-Buffer-Overflow-in-lzw_decoder_new/
NOTE: Introduced by: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/b88f1ce91a610a4e491a4ad6352183791e78afac (2.39.2)
NOTE: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/merge_requests/130
+ NOTE: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/76eda67dbc3f48c9dd6815a5aaf6014ea4a16771 (2.42.9)
+ NOTE: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/0cf97225c9c227d11fc4ddf9cba8e8480672ee1b (2.42.9)
NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/19ebba03117aefc9d0312f675f3a210ffdcc4907 (2.42.9)
- NOTE: Tests: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/449441210921c8ed417b0c4d5edbccd2d57e23f8
+ NOTE: Tests: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/commit/449441210921c8ed417b0c4d5edbccd2d57e23f8 (2.42.9)
CVE-2021-44647 (Lua v5.4.3 and above are affected by SEGV by type confusion in funcnam ...)
- lua5.4 5.4.4-1 (bug #1004189)
[bullseye] - lua5.4 <no-dsa> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/143b0f6529c7d26e97fa2c3c01c1840a49a7e8e6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/143b0f6529c7d26e97fa2c3c01c1840a49a7e8e6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220828/d519866f/attachment.htm>
More information about the debian-security-tracker-commits
mailing list